Pricing
One platform. Two products. Clear pricing.
Start free, pay only for what you use, and bundle both products to save. No surprise bills, no hidden fees.
Team
Card-billable entry. Monitor one domain.
- 1 domain
- 250 monitored identities
- Email + Slack alerts
- 90-day history
- Breach + stealer log + combolist
- Basic severity scoring
Business
Most PopularFor mid-sized teams running active SOC workflows.
Everything in Team, plus:
- 3 domains (subdomains auto)
- 2,500 monitored identities
- + PagerDuty + custom webhook
- 1-year history
- Read-only API
- Recommended actions
- 24h freshness SLA
Scale
For mature SOC programs with cross-business coverage.
Everything in Business, plus:
- 10 domains
- 25,000 monitored identities
- Full read/write API
- SSO / SAML
- 2-year history
- Dedicated CSM
- Quarterly threat brief
- 1h freshness SLA
- Session cookie + browser fingerprint context
Enterprise
MSP / multi-tenant deployments. Typical $50K–$250K+/yr.
Everything in Scale, plus:
- Unlimited domains and identities
- Custom TIP integration
- On-prem option
- 24/7 incident support
- Real-time push
- Monthly executive briefing
Enterprise contracts typically range $50K–$250K+/yr depending on domain count, identity volume, and integration depth.
Same data. Different speed, scale, and context.
Every paid tier sees the same breach data, stealer log, and combolist sources. What changes is how fast you get alerts (freshness SLA), how many assets you can monitor (domains and identities), how you integrate (alerts and API), and how much context we surface for response.
Session cookie and browser fingerprint context — the MFA-bypassable artifacts — are reserved for Scale and above as a responsibility tier, not as a paywall.
Compare plans
| Feature | Team | Business | Scale | Enterprise |
|---|---|---|---|---|
| Domains | 1 | 3 | 10 | Unlimited |
| Monitored identities | 250 | 2,500 | 25,000 | Unlimited |
| History retention | 90 days | 1 year | 2 years | Unlimited |
| Freshness SLA | ≤3d | ≤1d | ≤1h | Real-time |
| Uptime SLA | 99.9% | 99.95% | 99.99% | 99.99% |
| Email + Slack alerts | ||||
| PagerDuty + webhook | ||||
| API (read) | ||||
| API (write) | ||||
| Bulk export | ||||
| Breach frequency context | ||||
| Weaponizable context (cookie + fingerprint) | ||||
| Recommended actions | ||||
| Threat briefing | ||||
| SSO / SAML | ||||
| Dedicated CSM | ||||
| 24/7 support | ||||
| On-prem option |
Not sure which plan fits?
Tell us your traffic and identity counts and we'll size the right plan or bundle with you.